First release of this fork. The engine underneath is still upstream's, but this tree carries a long stretch of operational work on top of it.

Highlights

• Recon toolbox baked into the image: nuclei, httpx, subfinder, katana, ffuf and dalfox at release-pinned versions, plus a sqlmap checkout that tracks the default branch. Each one is smoke tested at build time by running it once; none is checksum verified in this release, and #127 adds checksum verification.
• Recursive recon skill: bbot v3.0.2 with a policy gate. Passive, zero-touch scans when a program bans scanners; active modules only when it allows them.
• php2shell skill: upgrade a file-inclusion finding to verified RCE, lab first and gated on program policy.
• Goal ambiguity gate at task creation, plus LLM chain failure escalation and per-intent profile rotation.
• Stagnation warning in the graph overview when a worker repeats itself without producing findings.
• Per-task credentials vault, cost ledger with per-call token accounting, backup script, MCP health reporting.
• Findings discipline: proof-basis gates, measured impact, adversarial verification and dedup rules.

Changed

• Norma upgraded to v0.4.4: per-task process-tree memory watchdog, UTF-8 aligned truncation, non-interactive subprocess environments, message_delta usage recovery, streaming fixes.
• Pause preserves the task timeout budget; paused time is frozen in the task clock.
• Prompt-injection hardening on seed material and MCP tool descriptions.

Removed

• In-app self-update and the automatic version check. The update source was hard-coded to a repository that no longer exists and its checksums came from the same release. Upgrade with update.sh or a release archive. Thanks to @stevenAthompson for this one.

Full details in CHANGELOG.md.

Images are not published to a registry from this repository yet. Build locally with the Dockerfile, or run the archive for your platform.